[FFmpeg-user] unable to git pull, git clone due to SSL cert errors

Pavel Koshevoy pkoshevoy at gmail.com
Fri Oct 8 07:27:16 EEST 2021

On Thu, Oct 7, 2021, 07:30 Moritz Barsnick <barsnick at gmx.net> wrote:

> Von: "Pavel Koshevoy" <pkoshevoy at gmail.com>
> > Am I the only one having this problem:
> >
> > $ git pull
> > fatal: unable to access 'https://git.ffmpeg.org/ffmpeg.git/': SSL
> > certificate problem: certificate has expired
> Recent changes to the certificate chain of LetsEncrypt expose problems
> with gnutls. (git uses curl, which in turn uses gnutls on many platforms,
> though it can use openssl or mbedtls as well).
> Check the dependencies and whether you have an update for gnutls on your
> platform. You may also need the latest ca-certificates package. On Ubuntu
> 16.04, this is the relevant change to libgnutls:
> gnutls28 (3.4.10-4ubuntu1.9) xenial; urgency=medium
>   * Backport patches from Upstream/Debian to check validity against system
>     certs. This is to allow correctly validating default letsencrypt
>     chains that now also include a redundant expired certficate. LP:
>     #1928648
>  -- Dimitri John Ledkov <dimitri.ledkov at canonical.com>  Fri, 27 Aug 2021
> 14:19:17 +0100
> Not sure what the state on other distributions or OSs is.

In my case it's macos 10.14.   System /usr/bin/git is affected, so I've
installed git from macports instead and that's working fine, I can git pull

Thank you all for the pointers.

More information about the ffmpeg-user mailing list